Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/EyfFy2NH9aJCITkH8OY0aqXp60U.roa
File: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (raw, json)
Hash identifier: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=
Subject key identifier: 13:27:C5:CB:63:47:F5:A2:42:21:39:07:F0:E6:34:6A:A5:E9:EB:45
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 01942369CC84DA75BF180A0B5DC059E000FF
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/EyfFy2NH9aJCITkH8OY0aqXp60U.roa
Signing time: Wed 01 Jan 2025 19:48:43 +0000
ROA not before: Wed 01 Jan 2025 19:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 132.76.0.0/16 maxlen: 16
132.77.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:cc:84:da:75:bf:18:0a:0b:5d:c0:59:e0:00:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Jan 1 19:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1327c5cb6347f5a242213907f0e6346aa5e9eb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:f9:a5:c0:6f:de:f4:dd:6f:53:fd:ba:ad:
11:38:31:ea:f3:ab:aa:8b:40:64:e9:9e:f9:43:72:
4b:8d:0c:75:bd:d2:11:95:bb:5e:8c:24:a0:1f:a6:
de:b3:25:f4:6f:0c:bf:4a:d9:2a:35:01:37:ee:64:
90:dc:b4:ef:0c:54:0b:6c:f3:40:d2:e9:f3:f3:e8:
09:e7:bf:cd:4a:a3:11:7a:e0:95:57:47:fa:a8:ce:
f1:cb:aa:a0:f5:e5:50:6e:02:33:f2:1e:83:04:ce:
73:24:34:52:db:68:cf:a9:e0:87:2f:06:aa:4d:b2:
e4:69:a4:c4:6c:4e:8d:c7:16:6f:48:6f:86:d4:c3:
19:07:9b:22:dd:ca:d4:b7:b7:21:9c:6f:6b:29:04:
a5:e7:f5:d0:fa:bc:45:71:58:c3:12:c1:3d:71:95:
08:f5:dc:5c:31:20:cf:16:83:3d:61:46:94:b4:25:
23:53:f1:0f:a0:ea:92:13:52:40:3a:06:f8:3a:59:
56:57:d0:9b:8b:7f:0f:78:ea:09:d8:52:fc:17:b7:
f3:4d:a7:7a:d4:79:f1:f8:6c:a7:18:7f:a9:51:3c:
49:3a:00:d6:22:fe:dc:ba:9b:8b:4e:79:b3:84:9e:
e2:c2:1e:ab:1f:b7:ba:63:b4:8e:41:49:a4:18:57:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:27:C5:CB:63:47:F5:A2:42:21:39:07:F0:E6:34:6A:A5:E9:EB:45
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/EyfFy2NH9aJCITkH8OY0aqXp60U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.76.0.0/15
Signature Algorithm: sha256WithRSAEncryption
67:f0:51:3d:3f:5a:5b:5a:82:07:6b:5c:3b:2c:84:ed:d3:b8:
35:65:41:51:1c:8a:87:9d:04:4d:0d:7c:6f:63:6a:1e:07:c7:
8b:38:05:1d:77:dd:ea:c5:69:3f:c7:3a:61:e9:be:4c:71:19:
29:2a:da:fb:f8:4f:42:d9:b6:e0:15:b4:1c:0c:1b:ba:b7:1a:
34:90:98:c8:f2:3b:73:07:de:6b:05:e8:e8:4e:40:34:f6:a5:
2d:cc:f2:73:a1:c4:53:55:14:da:5d:df:e5:11:46:f3:62:e4:
a0:52:e1:61:56:ca:5b:ba:2e:c5:2f:1a:2b:3c:ce:dc:91:de:
37:07:82:48:3f:32:ec:4a:9d:a5:76:6c:e9:97:a3:d0:82:61:
f4:86:34:7b:da:45:48:80:d3:2b:b6:b1:31:cd:d1:61:be:3e:
e4:59:cc:46:9f:41:02:89:2d:f0:4d:c6:90:33:62:13:93:16:
80:90:93:9d:71:aa:db:34:ef:2a:de:3c:ca:76:a1:19:fe:7a:
9d:5d:5c:d5:36:cd:38:9f:a0:a9:cc:a8:e8:4e:9a:06:a7:bb:
b2:34:2c:f4:b3:79:25:29:e5:a8:d7:59:c9:96:6f:ce:05:7b:
7e:3c:3a:d6:81:92:4b:15:66:98:3f:5c:56:3a:a9:0e:de:5e:
86:b5:94:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:43:40 2025 by rpki-client